# JWT app deprecation and migration

**URL:** <https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653>\
**Category:** App Marketplace\
**Created:** [March 14, 2023, 3:24am UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653 "2023-03-14T03:24:20Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![samudraganguly002017](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/samudraganguly002017/32/45827_2.png) [@samudraganguly002017](https://devforum.zoom.us/u/samudraganguly002017)\
**Post date:** [March 14, 2023, 3:24am UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/1 "2023-03-14T03:24:20Z")

</div>

I am using the Android and the Web SDK for Zoom Meeting. I had chosen this option while creating the apps.

 ![Screenshot_20230314-084527_Chrome](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/2/d/2d3b69b864f8b9aea3e5601be863ea06de253762.jpeg)

I had not chosen the **JWT** option, but still I received the below mail.

 ![Screenshot_20230314-085029_Gmail](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/b/e/be91f86398d76284da233d4ee67bb87a665fb6d6.jpeg)

I know that JWT apps will be deprecated from June 1, 2023, and a migration is required for the functioning of the apps. But do I need to migrate from SDK to Server-to-Server too?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 15, 2023, 4:46pm UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/2 "2023-03-15T16:46:40Z")

</div>

Hi @samudraganguly002017

If you are not using a JWT app you should be good with your SDK app  
Is there a case where you are using a JWT app type for something else ?

---

<div class="post-metadata">

**Author:** ![samudraganguly002017](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/samudraganguly002017/32/45827_2.png) [@samudraganguly002017](https://devforum.zoom.us/u/samudraganguly002017)\
**Post date:** [March 15, 2023, 8:11pm UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/3 "2023-03-15T20:11:37Z")

</div>

Let me explain the situation. I have chosen the SDK option (as you can see in the screenshot). But, still I received the mail for migration. Now, in my dashboard, I can see it is written in JWT app option, “You already have an app”. So, I am a bit worried.

---

<div class="post-metadata">

**Author:** ![samudraganguly002017](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/samudraganguly002017/32/45827_2.png) [@samudraganguly002017](https://devforum.zoom.us/u/samudraganguly002017)\
**Post date:** [March 15, 2023, 8:16pm UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/4 "2023-03-15T20:16:00Z")

</div>

I would like to mention another point. For creating the signature in web app, I have used Flask backend and in that, I have used pyjwt to create the encoded signature.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 16, 2023, 6:08pm UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/5 "2023-03-16T18:08:33Z")

</div>

Hi @samudraganguly002017  
Can you verify that in your code you are NOT using the credentials associated with your JWT app? these would be API key and API secret

---

<div class="post-metadata">

**Author:** ![samudraganguly002017](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/samudraganguly002017/32/45827_2.png) [@samudraganguly002017](https://devforum.zoom.us/u/samudraganguly002017)\
**Post date:** [March 16, 2023, 6:24pm UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/6 "2023-03-16T18:24:00Z")

</div>

I am quite sure that I have used SDK key and SDK secret in my code. Although I have used the pyjwt module to encode my signature, as I have mentioned.

---

<div class="post-metadata">

**Author:** ![datlc.cc0506](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/datlc.cc0506/32/46644_2.png) [@datlc.cc0506](https://devforum.zoom.us/u/datlc.cc0506)\
**Post date:** [March 21, 2023, 8:36pm UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/7 "2023-03-21T20:36:06Z")

</div>

Thank you for sharing that knowledge. I had the same problem so it was solved @elisa.zoom

---

<div class="post-metadata">

**Author:** ![samudraganguly002017](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/samudraganguly002017/32/45827_2.png) [@samudraganguly002017](https://devforum.zoom.us/u/samudraganguly002017)\
**Post date:** [April 9, 2023, 7:19am UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/8 "2023-04-09T07:19:42Z")

</div>

So, if I have chosen the SDK option to begin with, and I am using SDK key and secret, why does my dashboard show that I have a JWT app?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [April 10, 2023, 4:39pm UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/9 "2023-04-10T16:39:07Z")

</div>

Hi @samudraganguly002017  
The reason why you have a JWT app is that all accounts have one JWT app associated with their account.  
We are encouraging developers to Not use this app type since we are going to deprecate it

---

<div class="post-metadata">

**Author:** ![samudraganguly002017](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/samudraganguly002017/32/45827_2.png) [@samudraganguly002017](https://devforum.zoom.us/u/samudraganguly002017)\
**Post date:** [April 10, 2023, 4:48pm UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/10 "2023-04-10T16:48:10Z")

</div>

Hi @elisa.zoom, I have not selected the **JWT** app type. As I have already mentioned, I have selected SDK and using the SDK key and secret (in both Android and Web). It is still showing that I have a JWT app. Can you kindly say what I should do? How can I migrate from JWT to SDK if I have not selected JWT in the first place?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [April 10, 2023, 5:47pm UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/11 "2023-04-10T17:47:25Z")

</div>

Hi @samudraganguly002017 If you have not selected or created a JWT app type, then you do not have to take any actions

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [April 13, 2023, 1:24pm UTC](https://devforum.zoom.us/t/jwt-app-deprecation-and-migration/84653/12 "2023-04-13T13:24:43Z")

</div>

Closed on April 13, 2023, 1:24pm UTC

This topic was automatically closed after 30 days. New replies are no longer allowed.
